ESTHERLEETA BIMPONG
Atlanta,GA
Summary
Information Security Analyst with RMF and NIST SP 800-53 Rev. 5 experience supporting ATO, FedRAMP, and FISMA compliance for enterprise systems. Leads assessment reviews, validates security evidence, and maintains SAR and POA&M updates. Supports vulnerability remediation and continuous monitoring to reduce risk and improve security posture.
Overview
1
1
Certification
9
9
years of professional experience
Work History
Information Security Analyst
Ciox Healthcare
Alpharetta, GA
09.2021 - Current
- Direct executive-level oversight of Authorization to Operate (ATO) initiatives, encompassing continuous monitoring, application security evaluations, and compliance attestation, leveraging Nessus for advanced vulnerability diagnostics and risk quantification.
- Scrutinize, analyze, and validate assessment artifacts and implementation evidence to ensure absolute conformance with FedRAMP, agency-mandated directives, and NIST SP 800-53 Rev. 5 baselines.
- Spearhead comprehensive RMF lifecycle execution, including system categorization, security control tailoring, implementation assessment, and development of authoritative authorization packages.
- Strengthened Cybersecurity Supply Chain Risk Management (C-SCRM) by evaluating supplier documentation and Software Bill of Materials (SBOM) to identify and mitigate supply chain vulnerabilities, enhancing overall security resilience.
- Conducted evaluations of application, network, and system configurations, documented baseline deviations, and formulated remediation roadmaps to improve enterprise security posture.
- Authored and refined Security Assessment Reports (SARs), synthesized assessment outcomes, quantified residual risks, and provided authorization recommendations to executive leadership.
- Document security assessment findings within Security Controls Assessment Worksheets and orchestrate Plans of Action and Milestones (POA&M) to ensure expeditious remediation and sustained risk reduction.
Security Control Assessor
Alcon Laboratories
Duluth, GA
08.2017 - Current
- Lead Assessment & Authorization (A&A) efforts, ensuring integrity, quality, and completeness of all mandated artifacts and processes.
- Execute rigorous assessments of IT systems and enterprise architectures to ensure strict adherence to RMF, NIST CSF, NIST 800-53 Rev. 5, and governing DoD and Air Force directives.
- Execute comprehensive risk and vulnerability assessments to ascertain protection requirements and deliver strategic recommendations to the SCA, Authorizing Official, and the CISO.
- Assessed network and systems architecture for accuracy, delivering formal authorization recommendations and security packages to AO/DAO for adjudication.
- Evaluate risk and control matrices and testing protocols to ascertain control effectiveness, identify deficiencies, and assess design adequacy.
- Aggregated and examined documented business processes, narratives, and flowcharts to identify inherent risks and validate compensating controls' efficacy.
- Formulated conclusions on internal controls and operational efficiency, recommending policies to enhance system reliability and defend against unauthorized intrusion.
Education
Master of Science - Information Technology, Concentration in Health Informatics
Walden University
Bachelor of Science - Building Technology
Kwame Nkrumah University of Science and Technology (KNUST)
Skills
- Risk management framework execution
- NIST SP 800-53 compliance
- FISMA and FedRAMP adherence
- Assessment and authorization processes
- Authorization to operate documentation
- Security assessment reporting
- Plan of action management
- Continuous monitoring strategies
- Vulnerability assessment and remediation
- Cybersecurity supply chain risk management
- SBOM analysis methodologies
- System security planning
- Security posture enhancement techniques
- Contingency planning practices
- GRC platform utilization
Certification
CompTIA Security
Timeline
Information Security Analyst
Ciox Healthcare
09.2021 - Current
Security Control Assessor
Alcon Laboratories
08.2017 - Current
Master of Science - Information Technology, Concentration in Health Informatics
Walden University
Bachelor of Science - Building Technology
Kwame Nkrumah University of Science and Technology (KNUST)